Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/n74T6pzqS4wKcZXuSI1AsIimzhM.roa
File: n74T6pzqS4wKcZXuSI1AsIimzhM.roa (raw, json)
Hash identifier: 3tiMapQHU/hP9sdjOR6pagJAYl7YF0353fu6ZzgPkgM=
Subject key identifier: 9F:BE:13:EA:9C:EA:4B:8C:0A:71:95:EE:48:8D:40:B0:88:A6:CE:13
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 0185718C47C6A0106B0F1ABC6FC46CAD4DE8
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/n74T6pzqS4wKcZXuSI1AsIimzhM.roa
Signing time: Mon 02 Jan 2023 08:14:56 +0000
ROA not before: Mon 02 Jan 2023 08:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a06:7380::/29 maxlen: 29
2a0a:db80::/29 maxlen: 29
2a0b:6500::/29 maxlen: 29
2a07:4980::/29 maxlen: 29
2a07:ec40::/29 maxlen: 29
2a06:7d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:47:c6:a0:10:6b:0f:1a:bc:6f:c4:6c:ad:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Jan 2 08:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fbe13ea9cea4b8c0a7195ee488d40b088a6ce13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:73:3d:7e:c9:c0:8f:71:94:8c:87:c5:cc:
0f:58:c0:94:81:7f:5e:93:57:9a:09:28:63:e5:ff:
54:be:ed:6c:bb:03:90:53:30:92:b9:36:a7:64:7f:
5e:87:01:ad:e7:48:2f:83:3d:80:b0:c1:5c:b3:c7:
9b:e0:5d:c9:e6:a0:a0:65:7f:0b:6d:fe:ec:c1:44:
76:9f:3f:96:5b:c0:c0:a1:19:5a:e7:57:15:56:fb:
38:40:0a:25:a2:91:f1:91:8d:74:7a:56:76:0c:98:
8d:53:ea:23:f7:90:28:4c:d2:b6:41:56:35:23:83:
0a:f3:ab:e1:c2:52:b3:4a:0a:1e:ce:53:7b:d1:0e:
a5:f8:d3:91:d2:0c:18:8c:14:90:d1:80:6c:c0:3b:
b0:f5:3c:5b:b1:4c:d2:ac:27:34:78:07:5d:01:ff:
b5:5c:4a:f9:de:85:72:2d:ed:97:a0:60:9d:d4:47:
bf:ef:7f:5b:ed:d4:e0:e6:47:af:9a:3a:70:7a:9d:
68:fd:cf:8e:bb:67:ab:91:c5:a6:9a:13:19:8d:71:
f3:24:a5:32:c2:33:d7:29:f4:e9:b2:2a:0e:fc:6d:
61:7b:fa:cc:29:bb:b0:7a:d6:9b:71:e0:fa:28:63:
9c:00:23:b2:a5:50:8c:a4:63:98:9e:8e:1c:e4:16:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:13:EA:9C:EA:4B:8C:0A:71:95:EE:48:8D:40:B0:88:A6:CE:13
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/n74T6pzqS4wKcZXuSI1AsIimzhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:7380::/29
2a06:7d00::/29
2a07:4980::/29
2a07:ec40::/29
2a0a:db80::/29
2a0b:6500::/29
Signature Algorithm: sha256WithRSAEncryption
08:31:c0:6a:7b:11:3f:25:4e:90:f4:63:92:75:2a:ac:15:85:
28:14:d8:17:90:8f:e5:4e:e3:6b:f7:b1:4e:98:a8:a0:c4:85:
89:2b:60:4e:8c:21:f7:49:53:bd:b7:92:21:b1:95:10:88:94:
ed:7c:26:64:68:8a:3c:95:59:b7:91:96:65:8b:22:1f:12:87:
1c:d5:12:00:12:bb:4d:c4:25:17:0a:e0:74:11:97:50:09:ab:
4d:9a:43:38:11:94:0f:fe:7a:4b:a9:c9:de:28:d0:45:15:3e:
39:96:12:c2:40:20:65:a4:40:49:28:39:ea:60:71:5d:26:48:
f9:6a:bb:85:5c:63:1a:3a:b7:9d:04:69:7c:f1:b2:a8:3b:f2:
0f:30:86:55:11:6d:32:7c:8b:33:7b:03:cb:dc:a4:c8:09:df:
73:13:c4:73:6a:a3:57:64:93:46:b0:99:de:e2:ee:71:99:af:
28:4b:08:72:4a:a7:30:c0:f2:b0:5a:35:9d:a2:2f:47:32:bd:
56:d7:df:83:98:d1:8b:c1:0e:94:0f:29:9a:23:9f:72:13:2a:
cf:35:9f:b3:13:aa:15:2d:0c:bf:96:3b:f3:9c:9e:5d:89:0c:
93:04:05:1e:4a:3f:ef:d9:96:2a:a8:88:d5:b4:d5:82:5c:03:
98:bd:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:37 2024 by rpki-client on console-ams.rpki-client.org